diff --git a/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf b/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf index f873e6af3734fd3c84e315a95af372f487068c64..58f6f42840bd6c59167a82c4998e38533d5b43bc 100644 --- a/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf +++ b/conf/modsecurity/crs/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf @@ -38,5 +38,8 @@ SecRule REQUEST_FILENAME "@endsWith /wp-admin/admin-ajax.php" \ phase:2,\ pass,\ nolog,\ - ctl:ruleRemoveTargetByTag=CRS;ARGS:widget-event_list_widget[2][title]" + ctl:ruleRemoveTargetByTag=CRS;ARGS:widget-event_list_widget[1][title],\ + ctl:ruleRemoveTargetByTag=CRS;ARGS:widget-event_list_widget[1][location_length],\ + ctl:ruleRemoveTargetByTag=CRS;ARGS:widget-event_list_widget[2][title],\ + ctl:ruleRemoveTargetByTag=CRS;ARGS:widget-event_list_widget[2][location_length]"